What is claimed is: 

5 1. A method for secure enrollment of a device with services of a 

clearinghouse enrollment server supporting communications completed by an 
Internet telephony system, comprising the steps: 

initiating a request by the device to enroll for the services of the 
clearinghouse enrollment server; 
10 verifying an identity of the clearinghouse enrollment server by using a 

security infrastructure comprising the Secure Sockets Layer (SSL) and a public key 
infrastructure; and 

responsive to verifying the identity of the clearinghouse enrollment server, 
completing enrollment of the device to access the services of the clearinghouse 
1 5 enrollment server. 
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2. A method for secure enrollment of a device with services of a 
clearinghouse server for an Internet telephony system, comprising the steps: 
obtaining an identity of the clearinghouse server; 

issuing a CA certificate request from the device to the clearinghouse server 
5 using the obtained identity; 

responsive to the CA certificate request, transmitting a CA certificate from 
the clearinghouse server to the device; 

determining by the device the verification of the CA certificate; 
responsive to verification of the CA certificate, generating a combination of 
10 a private key and a public key and issuing to the clearinghouse server a request 
from the device for enrollment comprising the public key; 

responsive to the device enrollment request, generating a public key 
certificate at the clearinghouse server and transmitting the public key certificate to 
the device, thereby enabling the device to securely verify the identity of the 
15 clearinghouse server; and 

responsive to verifying the identity of the clearinghouse server, completing 
enrollment of the device to access the services of the clearinghouse server. 
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